CVEs published June 5, 2026
168 CVEs were published on June 5, 2026: 29 critical, 54 high. 2 are now in CISA KEV.
- Published
- 168
- Critical
- 29
- High
- 54
- Medium
- 80
- Low
- 5
- Unrated
- 0
- Now in CISA KEV
- 2
- Fix available
- 84
Most affected products
- Red Hat Enterprise Linux
- 9
- mcmilk 7-Zip
- 8
- Samsung Mobile Devices
- 8
- Termix-SSH Termix
- 7
- haxtheweb haxcms-php
- 6
- LMS Community Lyrion Music Server
- 6
- TP-Link Systems Tapo C520WS
- 6
- Arista Networks Arista Edge Threat Management - Arista Next…
- 5
- tittuvarghese CollegeManagementSystem
- 5
- Altium Enterprise Server
- 4
Critical 29
- CVE-2026-11429Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code ExecutionAltium Enterprise Server · Altium
- CVE-2026-11423Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege EscalationAltium Enterprise Server
- CVE-2026-11420Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File ReadAltium Enterprise Server
- CVE-2026-11419Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File WriteAltium Enterprise Server
- CVE-2026-45758Malicious code in guardrails-ai 0.10.1 (supply chain compromise)guardrails-ai guardrails · guardrails-ai
- CVE-2026-45779Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromiseubccr xdmod
- CVE-2026-45777Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injectionubccr xdmod
- CVE-2026-11414Unauthenticated File Exfiltration in Altium Enterprise Server Vault Service via Hard-coded Cryptographic Key and Path TraversalAltium Enterprise Server
- CVE-2026-46496HAX CMS: Stored XSS via '<video-player>' component allows arbitrary JavaScript execution and token thefthaxtheweb haxcms-nodejs · haxtheweb video-player +2
- CVE-2026-46396HAX CMS has a stored XSS via <iframe> that allows access to sensitive client-side data and account takeoverhaxtheweb haxcms-nodejs · haxtheweb video-player +4
- CVE-2026-10580Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST APIhippooo Hippoo Mobile App for WooCommerce
- CVE-2026-46395HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementationhaxtheweb haxcms-nodejs · @haxtheweb/haxcms-nodejs
- CVE-2026-46399Authenticated Remote Code Execution via File Overwritehaxtheweb haxcms-nodejs · haxtheweb haxcms-php
- CVE-2026-46389UDS Identity Config has a client authentication bypass in `ClientIdAndKubernetesSecretAuthenticator`defenseunicorns uds-identity-config
- CVE-2026-45750Termix Vulnerable to Arbitrary Command Execution in File ManagerTermix-SSH Termix
- CVE-2026-45748Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command InjectionTermix-SSH Termix
- CVE-2026-45746Termix Vulnerable to Arbitrary Command Execution via Session HijackingTermix-SSH Termix
- CVE-2026-45744Termix has an OS Command Injection in File Manager resolvePath endpointTermix-SSH Termix
- CVE-2025-71318NetMan 204 Missing Authentication for Administrative FunctionsRiello UPS NetMan
- CVE-2025-71317NetMan 204 Hard-coded Backdoor CredentialsRiello UPS NetMan
- CVE-2026-11362DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tagsBINARY DataDog::DogStatsd
- CVE-2026-9270DataDog::DogStatsd versions through 0.07 for Perl allow metric injectionsBINARY DataDog::DogStatsd
- CVE-2026-10879DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 bindersHMBRAND DBI
- CVE-2026-6274Authentication Bypass in DTS Electronics' Redline WR3200DTS Electronics Industry and Trade Ltd. Redline WR3200
- CVE-2026-49777WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerabilityShapedPlugin Product Slider Pro for WooCommerce
- CVE-2026-48907Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5joomlacontenteditor.net Joomla Content Editor (JCE) extensi…
- CVE-2026-7763Heap buffer overflow in morse.ko TIM IE processingMorse Micro HaLowLink
- CVE-2026-7762Heap buffer overflow in dot11ah.ko S1G Capabilities IE processingMorse Micro HaLowLink
- CVE-2026-36500An issue in the cluster-admin:backup-datastore component of Controller v12.0.5 allows attackers to execute a directory traversal via a craft
High 54
- CVE-2026-34123Whitelist Validation Bypass in TP-Link Tapo C520WSTP-Link Systems Tapo C520WS
- CVE-2026-9290WP User Manager <= 2.9.17 - Unauthenticated Path Traversal to Local File Inclusion via 'tab' Query Parameterwpusermanager WP User Manager – User Profile Builder & Memb…
- CVE-2026-7654Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Valuecodepress Admin Columns
- CVE-2026-11416MoviePilot Path Traversal via Cloud Storage Download Handlersjxxghp MoviePilot
- CVE-2026-11431Path Traversal in Altium Projects Service Allows Arbitrary File ReadAltium Enterprise Server · Altium
- CVE-2026-11424Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information DisclosureAltium Enterprise Server · Altium
- CVE-2026-11422Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Renderingshd101wyy Markdown Preview Enhanced · shd101wyy crossnote
- CVE-2026-45300async-http-client: Cookie header not stripped on cross-origin redirectAsyncHttpClient async-http-client · org.asynchttpclient:asy…
- CVE-2026-45778Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Resetubccr xdmod
- CVE-2026-46493haxtheweb/haxcms-php uses insecure method for generating salthaxtheweb haxcms-php
- CVE-2026-46400HAXCMS PHP has a File Upload Validation Bypasshaxtheweb haxcms-php
- CVE-2026-46398HAX CMS Missing Secure Flag on Cookiehaxtheweb haxcms-php
- CVE-2026-11401Privilege Escalation in AWS Advanced Go Wrapper for Amazon Aurora PostgreSQLAWS Advanced Go Wrapper · github.com/aws/aws-advanced-g… +11
- CVE-2026-11400Privilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQLAWS Advanced JDBC Wrapper · software.amazon.jdbc:aws-advanc…
- CVE-2026-46511HAXcms: Mass Token Exfiltration and Cross-Tenant Hijackhaxtheweb haxcms-nodejs · haxtheweb haxcms-php +1
- CVE-2026-5411WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Uploadwebfactory Advanced Google reCAPTCHA
- CVE-2026-5415WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Linkwebfactory Advanced Google reCAPTCHA
- CVE-2026-46394HAX CMS Vulnerable to Command Injection using Git.phphaxtheweb haxcms-php
- CVE-2026-46393HAXcms createSite SSRF Enables Arbitrary File Readhaxtheweb haxcms-nodejs · haxtheweb haxcms-php +1
- CVE-2026-46392HAX CMS PHP Has a Stored XSS via Case-Sensitivity Mismatch in HTML Upload Validationhaxtheweb haxcms-php
- CVE-2026-46391HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis@haxtheweb/open-apis
- CVE-2026-45749Termix's TOTP two-factor authentication can be disabled or bypassed using only the account passwordTermix-SSH Termix
- CVE-2026-45743Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)Termix-SSH Termix
- CVE-2026-45745Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theftTermix-SSH Termix
- CVE-2026-50733Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval()shd101wyy Markdown Preview Enhanced
- CVE-2026-49493Markdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS()shd101wyy Markdown Preview Enhanced
- CVE-2026-49492Markdown Preview Enhanced OS Command Injection in External File and Link Openingshd101wyy Markdown Preview Enhanced
- CVE-2026-45327TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injectionDatanoiseTV tinyice · github.com/DatanoiseTV/tinyice
- CVE-2026-45291Cloudburst Network erroneously handles invalid connectionsCloudburstMC Network
- CVE-2026-45290Cloudburst Network has DoS in RakNet connection handling due to missing bound checksCloudburstMC Network
- CVE-2026-8714Denial-of-Service Vulnerability in RTSP Input Handling on TP-Link's Tapo C520WSTP-Link Systems Tapo C520WS
- CVE-2025-5088Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis SessionArista Networks EOS / CloudVision eXchange
- CVE-2026-48095GHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocationmcmilk 7-Zip
- CVE-2025-59174Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially cEricsson Packet Core Controller
- CVE-2026-50234Lyrion Music Server 9.2.0 Path Traversal File ReadLMS Community Lyrion Music Server
- CVE-2026-11369IDOR in Comment API Allows Cross-Process Comment Read and Writelinqi
- CVE-2026-25659Ericsson Packet Core Gateway (PCG) - Improper handling of missing values VulnerabilityEricsson Packet Core Gateway
- CVE-2026-25658Ericsson Packet Core Gateway (PCG) - Improper handling of missing values VulnerabilityEricsson Packet Core Gateway
- CVE-2026-25657Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure VulnerabilityEricsson Packet Core Gateway
- CVE-2026-50264Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds heap write in dri2 drigetbuffers/drigetbufferswithformatRed Hat Enterprise Linux
- CVE-2026-50261Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in syncchangecounter()Red Hat Enterprise Linux
- CVE-2026-50260Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in freecounter()Red Hat Enterprise Linux
- CVE-2026-50258Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb key types due to unchecked shift levelsRed Hat Enterprise Linux
- CVE-2026-50259Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in xkb setmap request via mapwidths indexingRed Hat Enterprise Linux
- CVE-2026-50256Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: stack buffer overflow in font alias resolution due to libxfont2 name length mismatchRed Hat Enterprise Linux
- CVE-2026-50257Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free in misyncdestroyfence()Red Hat Enterprise Linux
- CVE-2026-11347Hardcoded Cryptographic Keys and Weak IV Generation in linqilinqi
- CVE-2026-8914Command injection in Profile change functionTeltonika Networks RUTOS · Teltonika Networks TSWOS
- CVE-2026-11332Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code executionRed Hat Ansible Automation Platform 2.5 for RHEL · Red… +15
- CVE-2026-21837HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management APIHCLSoftware Digital Experience
- CVE-2026-50593Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that Graphite project Graphite
- CVE-2026-41567Docker: `PUT /containers/{id}/archive` executes container binary on the hostmoby/v2/daemon · moby Docker Engine +4
- CVE-2026-36501An issue in the Externalizable.readExternal() component of Controller v12.0.5 allows attackers to cause a Denial of Service (DoS) via a craf
- CVE-2026-36785Shenzhen Tenda Technology Co., Ltd Tenda FH451 V1.0.0.9 was discovered to contain a stack overflow in the page parameter of the fromDhcpList
Medium, low and unrated 85
- CVE-2026-6242Authenticated Format String Vulnerability in ONVIF Subscribe Service on TP-Link Tapo C520WSTP-Link Systems Tapo C520WS
- CVE-2026-6241Authenticated Format String Vulnerability in ONVIF AddScopes Method on TP-Link Tapo C520WSTP-Link Systems Tapo C520WS
- CVE-2026-6240Authenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WSTP-Link Systems Tapo C520WS
- CVE-2026-6239Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WSTP-Link Systems Tapo C520WS
- CVE-2026-8976RSS Aggregator by Feedzy <= 5.1.7 - Missing Authorization to Authenticated (Contributor+) Import Job Creation, Execution, Purge, Log Clearing, and Information Disclosure via Multiple AJAX Sub-Actionsthemeisle RSS Aggregator by Feedzy – Feed to Post, Autoblog…
- CVE-2026-8608Event Monster <= 2.1.0 - Unauthenticated Insufficient Verification of Data Authenticity to Payment Bypass via em_capture_payment AJAX Actionawordpresslife Event Monster – Event Manager, Ticket Bookin…
- CVE-2026-6448Quiz and Survey Master (QSM) <= 11.1.2 - Authenticated (Admin+) SQL Injection via 'order' and 'limit' Parametersexpresstech Quiz and Survey Master (QSM) – Easy Quiz and Su…
- CVE-2026-9719LatePoint <= 5.6.0 - Cross-Site Request Forgery via invoices__change_status ActionLatePoint – Calendar Booking Plugin for Appointments and Ev…
- CVE-2026-10038Charitable <= 1.8.11.1 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Attachment Deletion via 'avatar' Parametersmub Charitable – Donation Plugin for WordPress – Fundraisi…
- CVE-2026-7047Frontend User Notes <= 2.1.1 - Cross-Site Request Forgery to Note Content Modification via 'confirmEdit' Actionabsikandar Frontend User Notes
- CVE-2026-8900Simple SEO Slideshow <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesspyrosvl Simple SEO Slideshow
- CVE-2025-12656Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletionwpvividplugins WPvivid — Backup, Migration & Staging
- CVE-2026-8893Express Payment For Stripe <= 1.28.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributespayaddons Express Payment For Stripe
- CVE-2026-7523Alba Board <= 2.1.3 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'card_id' Parameteralejo30 Alba Board
- CVE-2026-45409Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fixkjd idna · idna
- CVE-2026-25624Arista Edge Threat Management NGFW UI Administrative Cross-Site ScriptingArista Networks Arista Edge Threat Management - Arista Next…
- CVE-2026-25623Arista Edge Threat Management NGFW UI Arbitrary Command ExecutionArista Networks Arista Edge Threat Management - Arista Next…
- CVE-2026-25622Arista Edge Threat Management NGFW Captive Portal Custom Handler Command InjectionArista Networks Arista Edge Threat Management - Arista Next…
- CVE-2026-25621Arista Edge Threat Management NGFW Reports Application Insecure Input ValidationArista Networks Arista Edge Threat Management - Arista Next…
- CVE-2026-25620Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command InjectionArista Networks Arista Edge Threat Management - Arista Next…
- CVE-2026-45776Open XDMoD has Broken Access Control via Client-Controlled Session Variableubccr xdmod
- CVE-2026-46357HAX CMS NodeJS application Vulnerable to Denial of Service using Malicious Import Requesthaxtheweb haxcms-nodejs · @haxtheweb/haxcms-nodejs
- CVE-2026-46401HAX CMS PHP has Insufficient Session Expirationhaxtheweb issues
- CVE-2026-46397haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0haxtheweb haxcms-php · haxtheweb haxcms-nodejs
- CVE-2026-46390HAX CMS has Unauthenticated Git Access via User-Controlled Keyhaxtheweb haxcms-php
- CVE-2026-2379Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is DisabledArista Networks EOS
- CVE-2026-11344code-projects Vehicle Management System New Driver Registration Form newdriver.php unrestricted uploadcode-projects Vehicle Management System
- CVE-2026-11342code-projects Hotel and Tourism Reservation System details.php sql injectioncode-projects Hotel and Tourism Reservation System
- CVE-2026-11341D-Link DWR-M920 formIMEISetup sub_412DA0 os command injectionD-Link DWR-M920
- CVE-2026-11339D-Link DWR-M920 formUSSDSetup sub_41CF20 command injectionD-Link DWR-M920
- CVE-2026-7473Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding BypassArista Networks EOS
- CVE-2026-48112GHSL-2026-122 7-Zip Ar SYMDEF OOB Readmcmilk 7-Zip
- CVE-2026-11338SourceCodester Ship Ferry Ticket Reservation System manage_user cross site scriptingSourceCodester Ship Ferry Ticket Reservation System
- CVE-2026-48111GHSL-2026-121 7-Zip UEFI DEPEX OOB Readmcmilk 7-Zip
- CVE-2026-48104GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap readmcmilk 7-Zip
- CVE-2025-5090Arista CloudVision Exchange Cluster Instability via Unexpected Switch MessagesArista Networks EOS / CloudVision eXchange
- CVE-2026-48103GHSL-2026-119 7-Zip WIM SecurityId OOB readmcmilk 7-Zip
- CVE-2026-11337tittuvarghese CollegeManagementSystem fetch.php cross site scriptingtittuvarghese CollegeManagementSystem
- CVE-2025-5089Arista EOS SysDB Agent Denial of Service via Malformed CVX Client/Server MessagesArista Networks EOS / CloudVision eXchange
- CVE-2026-48102GHSL-2026-118: 7-Zip UDF Field OOB Readmcmilk 7-Zip
- CVE-2026-48101GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosuremcmilk 7-Zip
- CVE-2026-11336tittuvarghese CollegeManagementSystem Admin admin_page.php improper authorizationtittuvarghese CollegeManagementSystem
- CVE-2026-11335tittuvarghese CollegeManagementSystem login-form.php session_start session fixiationtittuvarghese CollegeManagementSystem
- CVE-2026-11334tittuvarghese CollegeManagementSystem fetch.php sql injectiontittuvarghese CollegeManagementSystem
- CVE-2026-480927-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116)mcmilk 7-Zip
- CVE-2026-11333tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted uploadtittuvarghese CollegeManagementSystem
- CVE-2026-50235Lyrion Music Server 9.2.0 Reflected XSS via search ParametersLMS Community Lyrion Music Server
- CVE-2026-50233Lyrion Music Server 9.2.0 Arbitrary Directory ListingLMS Community Lyrion Music Server
- CVE-2026-50232Lyrion Music Server 9.2.0 Stored XSS via Metadata TagsLMS Community Lyrion Music Server
- CVE-2026-50231Lyrion Music Server 9.2.0 Unauthenticated Stored XSS via server.logLMS Community Lyrion Music Server
- CVE-2026-50230Lyrion Music Server 9.2.0 Reflected XSS via server.logLMS Community Lyrion Music Server
- CVE-2026-11330thedotmack claude-mem Observation Content Hash store.ts computeObservationContentHash weak hashthedotmack claude-mem · claude-mem
- CVE-2026-11329onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hashonnx-mlir
- CVE-2026-11346Server-Side Request Forgery (SSRF) allowing Internal Network Probing in linqilinqi
- CVE-2026-11345Improper Authentication Bypass in linqi CDN File Accesslinqi
- CVE-2026-50263Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: use-after-free information disclosure in createsaverwindow()Red Hat Enterprise Linux
- CVE-2026-50262Xorg-x11-server: xorg-x11-server-xwayland: xorg-x11-server: out-of-bounds read/write in glx changedrawableattributesRed Hat Enterprise Linux
- CVE-2026-21038Improper input validation in Samsung Android USB Driver for Windows prior to version 1.9.5.0 allows local attacker to access out-of-bounds mSamsung Mobile Samsung Android USB Driver for Windows
- CVE-2026-21037Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary aSamsung Mobile Samsung Members
- CVE-2026-21036Improper authorization in Samsung Internet prior to version 30.0.0.39 allows local attackers to access sensitive information.Samsung Mobile Samsung Internet
- CVE-2026-21035Improper input validation in Samsung Plus TV prior to version 1.0.28.6 allows remote attackers to access sensitive information.Samsung Mobile Samsung Plus TV
- CVE-2026-21034Improper export of android application components in Samsung Auto prior to version 3.1.2.61 in Android 15 and 3.2.0.38 in Android 16 allows Samsung Mobile Samsung Auto
- CVE-2026-21033Improper export of android application components in ExpressHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attSamsung Mobile Samsung Assistant
- CVE-2026-21032Improper export of android application components in SmartHomeWidgetReceiver of Samsung Assistant prior to version 9.3.14 allows local attacSamsung Mobile Samsung Assistant
- CVE-2026-21031Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity.Samsung Mobile Devices
- CVE-2026-21030Improper access control in MediaTek Audio HAL prior to SMR Jun-2026 Release 1 allows local attackers to trigger privileged functions.Samsung Mobile Devices
- CVE-2026-21029Improper export of android application components in Galaxy Editing Service prior to SMR Jun-2026 Release 1 allows local attacker to executeSamsung Mobile Devices
- CVE-2026-21028Improper access control in AuditLogService prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.Samsung Mobile Devices
- CVE-2026-21027Improper export of android application components in ImsSettings prior to SMR Jun-2026 Release 1 allows local attackers to trigger logging fSamsung Mobile Devices
- CVE-2026-21026Improper export of android application components in SpriteWallpaper prior to SMR Jun-2026 Release 1 allows local attackers to access to senSamsung Mobile Devices
- CVE-2026-21025Incorrect privilege assignment in Telephony prior to SMR Jun-2026 Release 1 allows local attackers to access sensitive information.Samsung Mobile Devices
- CVE-2026-21017Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privilSamsung Mobile Devices
- CVE-2026-9088Keycloak: keycloak: information disclosure due to user profile permission bypassRed Hat build of Keycloak · org.keycloak:keycloak-services
- CVE-2026-21825HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search centerHCLSoftware DX Compose
- CVE-2026-21826HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injectionHCLSoftware Digital Experience & DX Compose
- CVE-2026-10732All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archivdecompress
- CVE-2026-50592In Znuny LTS before 6.5.21 and Znuny before 7.3.3, there is reflected XSS in AdminCommunicationLog (aka the communication log administratiZnuny
- CVE-2026-50591In Znuny LTS before 6.5.21 and Znuny before 7.3.3, XSS can occur via stored user preferences.Znuny
- CVE-2026-11312bytedance InfiniStore KV Map infinistore.h purge_kv_map algorithmic complexitybytedance InfiniStore · infinistore
- CVE-2026-50590In Mimecast Incydr before 2.6.0, arbitrary file access can occur.Mimecast Incydr
- CVE-2026-11326OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on *.openai.com origins.OpenAI Atlas
- CVE-2026-10878D-Link DWR-M920 formSmsManage sub_41C8E8 command injectionD-Link DWR-M920
- CVE-2020-25900HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city.HelloTalk
- CVE-2026-37737sanic-cors version 2.2.0 and prior contains an improper regular expression in the try_match() function in sanic_cors/core.py that uses re.masanic-cors
- CVE-2026-38579Multiple reflected Cross-Site Scripting (XSS) vulnerabilities in damasac thaipalliative_lte through version 3.0 allow remote attackers to in